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Abstract 

Truth maintenance systems have been used in recently developed 
problem solving systems. A truth maintenance system (TMS) is designed to 
be used by deductive systems to maintain the logical relations among the 
beliefs which those systems manipulate. These relations are used to 
incrementally modify the belief structure when premises are changed, giving 
a more flexible context mechanism than has been present in earlier 
artificial intelligence systems. The relations among beliefs can also be 
used to directly trace the source of contradictions or failures, resulting 
in far more efficient backtracking. 

In this paper a new approach is taken to truth maintenance 
algorithms. Each belief, or proposition, can be in any one of three truth 
states, true, false, or unknown. The relations among propositions are 
represented in disjunctive clauses. By representing an implication in a 
clause the same algorithm that is used to deduce its consequent can be used 
to deduce the negation of antecedents that would lead to contradictions. A 
simple approach is also taken to the handling of assumptions and 
backtracking which does not involve the non-monotoni c dependency structures 
present in other truth maintenance systems. 
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Introduction 



Truth maintenance systems have been used in recently developed 
problem solving systems [Stall man and Sussman 1976] [Doyle 1978a]. A truth 
maintenance system (TMS) is a domain independent system for maintaining the 
consistency and well foundedness of a set of beliefs. It i s an inherent ty 
proposi t ional mechanism which is designed to be used by deductive systems 
to maintain the logical relations between the propositions they generate. 
The truth maintenance system also simulates the effects of those relations 
to the extent that it can be used to incrementally modify the belief 
structure and retract assumptions when they lead to contradictions. This 
process can be used to realize substantial search efficiencies in that 
contradictions, or failures, only result in backtracking over relevant 
assumptions. 

An example of the use of a TMS would be an algebraic manipulator 
which is capable of using piecewise approximations to functions. In such a 
manipulator each equation is considered to be a proposition. When the 
manipulation of some set of equations results in a new equation, the 
equations used are recorded in the TMS as supporting the newly generated 
equation. A piecewise linear approximation to a function can be 
^^^^ represented by an implication between equations such as (> x -.25) a (< x 

^^ •25) -* (= (sin x) x). To use such an approximation of (sin x) the 

manipulator might have to assume that x was in the required range. If at 
some later time a value for x is found that is inconsistent with the 
assumptions, then the manipulator need simply announce to the TMS that the 
two conflicting equations, the assumed inequallity and the found value, are 
mutually contradictory. The TMS will then retract a relevant assumption. 
In such^ cases the TMS might instead be made to state all the assumptions 
upon which the contradiction depends and leave the choice of removal up to 
the manipulator. The use of piecewise linear approximations to the 
^ behavior of transistors, is one of the applications of truth maintenance 

used by Stallman and Sussman in electronic circuit analysis [Stallman and 
Sussman 1976] . 

In addition to the search efficiencies which are gained in dependency 
directed backtracking, the recorded relations between beliefs can be used 
to justify or explain the beliefs of the deductive system. Such 
explanations are useful in understanding and verifying the results of 
problem solvers. 

This paper introduces a new approach to the concepts and mechanisms 
of truth maintenance. The basic idea is to represent all logical relations 
between proposition in disjunctive clauses. For example implications of 
the form PI a P2 a P3 . . . -» Q wi I I be represented as -PI v -P2 v -P3 ... 
v Q. Notice that in the clause representation the distinction between 
antecedents and consequences disappears and therefore the negation of an 
antecedent in the implication can be as easily deduced as the consequent. 
This feature of the representation eliminates much of the backtracking 
mechanisms which are present in other truth maintenance systems [Stallman 
f\ and Sussman 1976] [Doyle 1978a]. Another common relation among propositions 
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we wish to be able to express is the notion that some set of them are 
mutually contradictory, formally -(PI a P2 a P3 ... a Pn) . This relation 
is transformed via DeMorgan's laws into the clause -PI v -P2 v -P3 ... v 
-Pn. This again eliminates the need for certain backtracking mechanisms 
present in other systems. 

The P r °P OS! * "' ons ir > other systems have only two truth states called 
" in" and "out", which represent "known to be true" (a well founded proof 
exists) and "not known to be true" (not in) respectively. My system uses 
the three more intuitive truth states of true, false, and unknown (hence 
the title of this paper). This eliminates the need of a separate entity to 
represent the negation of a proposition. 

The notion that the truth of some proposition is an assumption is 
simply represented by appropriately tagging the proposition. Uhen the 
assumption is found to lead to a contradiction (a clause that cannot be 
satisfied) the truth value is automatically retracted. I believe that this 
mechanism has most of the non-monotomc power of Doyle's system, but in a 
much simpler form (see [Doyle 1978a] for a discussion of non-monot inici ty) . 

At the end of the paper are a series of appendices which give the 
details of the implementation and an overview of its use. 
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The Algorithm 

The basic truth maintenance system (TMS) object types are literals 
(TMS nodes), truth values, terms, and clauses. TMS nodes represent 
assertions of the deductive system using the TMS* Such assertions might be 
of the form (COLOR A RED) or (MODE TRANSISTOR-1 BETA-INFINITE), but their 
TMS representation is simply a unique atom, i.e. a node. Nodes can have 
three possible truth states, true, false, and unknown. A truth value is a 
true or false value of a node. Changing a node from an unknown state to 
either true or false will be referred to as adding a truth value, since it 
is conceptually adding information. Changing a node from true or false to 
unknown will be referred to as removing a truth value, as it is 
conceptually removing information. A term is an association of a node with 
a value and is true when the node has that value, false when the node has 
the opposite value, and unknown otherwise. 

The relations between the truth values of the nodes are represented 
by proposi t ional formulas in conjunctive normal form. This means that 
there is a set of disjunctive clauses which must all be satisfied by the 
values of the nodes. Each clause contains a set of terms, one of which 
must be true. 

Justifications for assertions are represented as clauses. For 
example, if an assertion represented by the node C was implied by 
' assertions represented by A and B, then the clause would be ((A. false) or 

r* (B. false) or (C.true)).' The fact that some set of assertions are mutually 

contradictory is also represented in a clause. For example, if assertions 
represented by A,B, and C would lead to a contradiction, then the clause 
would be ((A. false) or (B. false) or (C. false)). 

Each clause can be given multiple interpretations. For example the 
clause ((A. false) or (C. false) or (D.true)) might be thought of as (A and 
C) -> D, or it could be thought of as (-D and C) -> -A. This clause can 
also be thought of expressing the fact that a contradiction results from A, 
C, and -D all being true simultaneously. Even more bizarre 
conceptualizations of the clause are possible, such as (A -> (HD -> -C)). 
Interpretations of the last type are useful in understandi ng cer tai n 
backtracking techniques to be discussed later. 

, Adding Clauses and Truth Values 

Clauses can be directly added to system at any time by a top level 
procedure and are instantly checked for possible deductions. Truth values 
can be added in two ways. The simplest is to add a truth value for a node 
as a premise. In this case no other reason for believing the value is 
needed. The second way is to deduce a truth value from a clause. Suppose 
all the terms of a clause are known to be false with one exception, which 
is a node whose truth value is unknown. In this case the one remaining 
node can have the appropriate truth value added to satisfy the clause. 
This is the only way truth values are deduced from the clauses in the TMS. 
There are however valid deductions which depend on more than one clause. 
fS For example given the two clauses A -> B and -A -> B it is possible to 
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deduce B. Such deductions are only made indirectly when certain types of 
contradictions ari se ' (contradictions will be discussed in later sections). 

When a truth value is added a check must be made to see if new truth 
values can be deduced from the added information. This is done by 
examining clauses which contain the term whose truth value has been added. 
Since clauses which contain the term which is made true are automatically 
satisfied, the only clauses that must be checked for possible deductions 
are those that contain the term which is made false. Since truth values 
are added recursively, " al I truth values that can be deduced via chains of 
such one-step clause deductions are added. 

For reading the following code it will be useful to refer to Appendix 
II in which the data structures are explained. The code presented below is 
a slight simplification of the actual code used here only to formalize the 
algorithm as described so far. It does not contain the mechanisms for 
handling contradictions which will be explained later. The complete code 
is given in Appendix III. 

(OEFUN SET-TRUTH (NODE, VALUE SUPPORT) 

* ;SUPP0RT IS EITHER THE ATOM 'PREMISE OR 

;A CLAUSE WHICH IS BEING USED TO DEDUCE VALUE 

(PROG () 

(COND ((NOT (EQ (GET NODE 'TRUTH) 'UNKNOWN)) 
f"*' (ERROR 'SET-TRUTH— VALUE-NOT-UNKNOWN NODE))) * 

(PUTPROP NODE VALUE 'TRUTH) 
(PUTPROP NODE SUPPORT 'SUPPORT) 

;F0R EACH CLAUSE WHICH CONTAINS THE TERM WHICH BECOMES FALSE 

; SUBTRACT ONE FROM THE NUMBER OF TERMS WHICH CRN POTENTIALLY SATISFY IT. 

(MAPC (FUNCTION (LAMBDA (CLAUSE) 

(PUTPROP CLAUSE (1- (GET CLAUSE *PSAT>) 'PSflT))) 
(GET NODE (GET VALUE 'OP-CLAUSES))) 

(MAPC (FUNCTION DEDUCE-CHECK) 

(GET NODE (GET VALUE 'OP-CLAUSES))))) 

(DEFUN DEDUCE-CHECK (CLAUSE) 
(PROG (F) 

(COND ((AND U (GET CLAUSE 'PSAT) i) 

(SETQ F (PCONSEQ CLAUSE))) 
(SET-TRUTH (CAR F) (COR F) CLAUSE))))) 

; PCONSEQ FINDS A NODE IN THE CLAUSE WHICH HAS A TRUTH STATE 
;0F UNKNOWN AND RETURNS A OOTTED PAIR OF THE NODE AND THE 
> VALUE WHICH THE NODE MUST HAVE TO SATISFY THE CLAUSE. 

It would be possible to check for more complex deductions. For 

example if there are two clauses (P or Q) and (P or -Q) it is valid to 

/"*\ deduce P. In general, arbitrary deductions could be done by deciding 
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whether the addition of some truth value inevitably leads to a 
contradiction. If this is indeed the case then the opposite truth 
value could be "deduced. The problem with this seemingly 
straightforward approach is in deciding if something must lead to a 
contradiction. A contradiction is inevitable when the set of clauses 
can not be satisfied by any truth values for the nodes which are 
unknown. Therefore in order to decide if a contradiction is inevitable 
the system must decide if the set of clauses can be satisfied by the 
remaining unknown nodes. This is a standard problem of proposi t ional 
logic and is known to be NP complete. This means that there are strong 
suspicions that it must require exponential time to solve. Therefore, 
in order to avoid such a combinatorial explosion I restrict myself to 
one clause deductions. This still gives all of the intuitive deductive 
power of a clause while preserving computat ional expedience. 



Removing Truth Values 

Truth values can be removed as well as added. This can happen 
when the user of the TUS decides that a premise is no longer known, or 
itcan happen when assumptions are retracted in backtracking. Uhen 
this happens it is necessary to remove all truth values that critically 
f^ K depend on the lost information. Truth values are used for deductions 

only by clauses that contain the term they make false. Therefore 
clauses which contain the term which was previously false, but is now 
unknown, are examined. If any of these clauses were used in the 
original deduction of some truth value, then the value deduced is a 
candidate for removal. 

In order, to determine whether a clause was the one originally 
used to deduce a truth value, each node has associated with it a 
support. The support is only used when the node has a known truth 
value, and is either a premise marker or the clause which was used in 
the original deduction of the truth value. Since the support is always 
assigned when a truth value is added, the truth values of the other 
nodes in the support can in no way depend on the supported value. This 
means that the support is well founded and the set of premises that a 
truth value is deduced from can always be determined by tracing 
supports without fear of loops. 

Care must be taken that values are not removed that can be 
deduced in other ways. One attempt at solving this problem is to check 
all clauses that contain the node whose value is being considered for 
removai^ to see if any can be used to deduce the value. However the 
following example demonstrates the problem with this approach. 
Consider the clauses: 
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A -> B 
B -> C 
C -> B 

Suppose that ;A was added as a premise and then later removed. 
Now when A Is removed there is still a clause, C -> B f that can be used 
to deduce B. The problem with using this clause to support the truth of 
B is that, since C depend on B, B would be used to support itself. The 
solution to this problem is to first recursively remove all candidates 
for removal (therefore removing all truth values that critically depend 
on them). After this has been done clauses which contain the terms 
whose values have been removed can be checked for deductions. If 
contradictions are present in the system, then it is possible that when 
a truth value is removed its opposite value can then be deduced 
(contradictions "wi I I be discussed in more detail a little later). 
Whenever a clause is used to deduce a truth value, the clause becomes 
the support for the value. Again since the support is found before the 
truth value is added, it must be well founded. An important point is 
that if a premise is removed by the TNS user, but the removed truth 
value can be deduced from other premises in the system, then the truth 
value remains, with a clause as its support instead of the premise 
marker. 

In reading the following code it will again be helpful to refer 
to Appendix II in which the data structures are explained. The code 
presented here is a simplification of the actual code used only to 
formalize the algorithm as discussed so far, i.e. it does not deal with 
contradictions anci assumptions which will be discussed later. The 
complete code is presented in Appendix III. 
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(DEFUN REMOVE-TRUTH (NODE) 
(PROG (VALUE) 

(SETQ VALUE (GET NODE 'TRUTH)) 
(COND (<EQ VALUE 'UNKNOWN) 

(ERROR 'REMOVE-TRUTH—VALUE-NOT-PRESENT NODE))) 
(PUTPROP NODE ' UNKNOWN ' TRUTH) 
(PUTPROP NODE NIL 'SUPPORT) 

;FOR EACH CLAUSE WHICH CONTAINS THE TERM WHICH WAS FALSE 

;ADO ONE TO THE NUMBER OF TERMS WHICH CAN POTENTIALLY SATISFY IT 

(MAPC (FUNCTION (LAMBDA (CLAUSE) 

(PUTPROP CLAUSE 'PSAT (1+ (GET CLAUSE 'PSAT))) )) 
(GET NODE (GET VALUE 'OP-CLAUSES))) 

; REMOVE TRUTH VALUES WHICH THESE CLAUSES HAD BEEN USED TO DEDUCE 

(MAPC (FUNCTION (LAMBDA (CLAUSE) 
(PROG (F) 

(COND ((AND (> (GET CLAUSE 'PSAT) I) 

(SETQ F (CAR (CONSEQ CLAUSE))) 

jCONSEQ FINDS A NODE WHICH SATISFIES THE CLAUSE. 
(EQ CLAUSE (GET F 'SUPPORT))) 
(REMOVE-TRUTH F)))))) 
(GET NODE (GET VALUE 'OP-CLAUSES))) 

;CHECK FOR ANY POSSIBLE DEDUCTIONS OF VALUES FOR THE 
j NODE WHOSE VALUE WAS REMOVED 

(MAPC (FUNCTION DEDUCE-CHECK) (GET NODE 'POS-CLAUSES) ) 
(MAPC (FUNCTION DEDUCE-CHECK) (GET NODE 'NEG-CLAUSES)) )') 



! Contradictions 

Consider a case in which a clause is added that contains only 
terms which are false. The clause is in contradiction with the rest of 
the data base and is therefore referred to as a contradiction. Since a 
clause is a contradiction only when ail of the terms in it are false, a 
contradiction is said to depend on the truth values of the terms in it* 
It is conceivable that a TfIS data base could contain several such 
contradictions. 

The addition of clauses is not the only way that contradictions 
can occur. Consider the two implications (P '-» Q) and (P -* -Q) . If no 
truth values are known for P or Q, then no deductions are made since 
each clause has two ways in which it might be satisfied. If a true 
value for P is determined, then one of the above clauses would be used 
to deduce a truth value for Q, while the other clause would become a 
contradiction. It is important to realize that in cases where both a 
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truth value and its negation can be proven, one of the truth values is 
chosen and ail clauses which could have implied its negation become 
contradictions, When adding a truth value leads to a contradiction, it 
is possible to add new clauses that allow deductions based upon this 
fact. In the above example the clause ( -P ) can be deduced from the 
two original clauses. To get a better feel for the general case 
consider the example: 

clause interpretation 

( (A. true) (B. false) (C. true)) (-A a B) -> C 

((C. false) (D. false) (E. true)) (C a D) -» E 

((A. true) (F. false) (E. false)) (-A a F) -» -£ 

Known values 

B true 

D true 

F true 

^ Now »n this case if a false value for A is added the first clause 

can be used to deduce C. Then the second clause can be used to deduce 
E. At this point however the third clause has become a contradiction. 
The relationship between the three clauses is shown in figure one. In 
the figure each clause is represented by a pair of right angled 
implication pointers which should be interpreted as B -» {-A -♦ C) . The 
new clause which can be added in this situation is (B a D a F) -» A 

To see how new clauses can be constructed from the appearance of 
* contradictions in general it is necessary to closely examine how 

contradictions result from the addition of truth values. At some point 
a truth value is added which removes the last chance of satisfying some 
clause, say CI, The term that became true when this value was added 
will be called Fl (E in the above example). At the instant before this 
truth value is added CI could have been used to deduce the opposite 
value. In a quiescent data base no such clause can exist since ail 
possible one step deductions are made. This means that a false truth 
value was added for some term in CI (A in the above example), but that 
CI became a contradiction before it could be checked for deductions. 
This second term wi I I be called F2. All possible deductions from the 
addition of any 'truth value are made when the value is added, and CI 
could potential l-y. have been used to deduce -Fl upon the addition of 
-F2. Therefore the truth value of Fl, which caused CI to be a 
contradiction, must also be a deduction from -F2. This situation is 
pictured in figure two. 

In the figure each pair of right angled implication pointers 
represents a clause. The clauses should be interpreted as ( (F C1 , a 

f m ^ s " CI l 

F 2 A •••' " > ^^2 -> -Fl)). Now if all the involved clauses 
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Figure 1. 
An example of clause formation as a result of a contradiction. The 
addition of-tA causes C3 to become a contradiction 
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The general case of clause formation resulting from a 
contradiction. This is the general case in which the addition of-»F2 causes 
CI to become a contradiction. 
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contained only two terms, then the clause ( F2 ) could be added. 

However, in the general case the contradiction results only when the 

peripheral terms are true. In other words (F C1 i a F^ 1 ? a ... F C2 i a 

C2 
F 2 A ••••) -> F2; This implication then is the clause which is 

added. The clause is formed during the unrolling of the recursive 

calls to the procedure for adding truth values. 

Hopefully the added clause will allow the deduction of the 

negation of the truth value that lead to the contrdict ion, -JF2 above, 

in those cases when it would again lead to the same contradiction. 

Ulhile the added clause is always valid, it does not always produce this 

desired result. The reason for this is that some of the peripheral 

truth values might also be deductions from the added value. In this 

case when the added value (call it -F2 as above) is retracted, some of 

the peripheral valyes will also disappear and its negation will not be 

deducible. However if -F2 is again added then the clause generated 

above will become a contradiction at the point at which all the 

peripheral values become true. This will lead to the generation of yet 

another clause. If F2 is still not deducible upon the retraction of 

-F2, then further additions of -F2 will generate still more clauses. 

It is always possible to force the system to deduce the negation of a 

truth value that leads to a contradiction by such "pulsing" of that 

value. I would tike to emphasize that it would require a quite complex 

structure to require more than one or two such "pulses". 



Default Values and Backtracking 

In many problem solving situations it is necessary to make 
assumptions that have no solid reason for belief. If such assumptions 
lead to contradictions then they should be retracted. Assumptions are 
represented as a subset of the premise values called default values and 
are marked in the implementation by having the atom 'default as their 
support. Whenever a node is given a default support the value 
supported is placed under a default property of the node. This value 
is then added whenever no other truth value for the node can be 
deduced. 

When a contradiction is present in the data base an attempt is 
made to remove it by removing default truth values. This involves 
tracing the dependency relations (via the supports associated with 
nodes) to find the premises upon which the contradiction depends and is 
therefore called dependency directed backtracking. Uhen a default 
value is found upon which the contradiction depends, it is removed. 
Hopefully the contradiction becomes an implication and can then be used 
to deduce the opposite of the default value removed. If the opposite 
of the default is not deduced, then the default value is added back. 
At this point, since the contradiction must reappear, the backtracking 
repeats and again the default value is removed. Due to the new clauses 
/"■"■S generated each time the contradiction appears, the negation of the 

default value must become deducible, and the backtracking halts when 
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either no contradictions are left, or the contradictions that are 
present do not depend on any default values. 



Clause Values and Hierarchies of Assumptions 

So far there has been no mention of the removal of clauses from 
the data base. Uhile the physical removal of clauses does not occur, 
there is a mechanism for making them impotent. This is done by adding 
a node to each clause which represents its validity. For example the 
clause (A or B) might become (-C1 or A or B) where CI represents the 
validity of the clause. Now as long as CI is true the clause acts as 
expected, but if the truth value CI is removed, then the clause is 
effectively removed. Each time a clause is added, some reason is given 
for believing it. This reason is used as the support for the truth of 
the node which represents the clause. This is usually useful only as a 
device for keeping track of the source of clauses for the TMS user. 
However it has one '.very important use in allowing assumptions to have 
antecedents. 

Suppose that in reasoning about animals it is first assumed that 
they are mammals. Furthermore suppose that in reasoning about mammals 
/^ '"'* is assumed that they are dogs. The assumption that some animal is a 

dog might depend on the assumption that it is a mammal. In general 
then assumptions must be, able to take antecedents, some of which might 
be other assumptions. Dependencies of this form can be represented in 
the TUS by a clause whose clause node has a default support. In the 
example let the mammal assumption be represented by Al and the dog 
assumption by A2. Now Al can be assumed (given a true default value). 
Once this has beeh done A2 can be added by adding the clause (Al -> A2) 
and giving the clause node a true default value. The clause allows the 
deduction of A2 only if Al is believed, also A2 can be removed as an 
assumption during backtracking by removing the default truth value of 
the added clause. 

Since clause nodes are no different than any other nodes, removal 
of their default truth values could be taken care of by the 
backtracking algorithm already described. However, in backtracking it 
is desirable to remove first assumptions upon which no other 
assumptions depend. In chess for example one normally considers 
several responses to a given move before going on to the next move. 
This helps prevent the thrashing involved in removing and adding many 
assumptions at once. 

A minor modification to the backtracking algorithm allows this 
selection of the default values. The number of supporting clauses that 
must be traced back from the contradiction to find a premise are 
counted. There may be several paths of supports that lead to a given 
premise, and in this case the maximum distance is used. Now if some 
default value implies some other assumption, then it will always appear 
^■■s at a greater distance from the contradiction than the assumption it 
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implies. This is because it will always appear in the support chains 
beneath the implied assumption. In view of this fact, our goal is 
achieved by choosing for removal the default value with the minimum 
maximum distance from the contradiction. 
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Comparison with Other Work 

There are several systems which use explicit justifications for 
beliefs. The work which is most closely related to the TMS presented 
here is that of Stall man and Sussman [Stailman and Sussman 19763 and 
Doyle [Doyle 1978a]. The basic difference between these systems and my 
TMS is in the mechanisms used for dependency directed backtracking. In 
both of these systems each assertion has only two truth states, 
believed and unknown, called "in" and "out" respectively. Since no 
assertion can be false in such a system, additional mechanisms are 
needed to prevent' the belief of sets of assumptions known to be 
contradictory. In Stailman and Sussman' s ARS system the assumptions 
underlying a contradiction are placed in a N0G00D assertion. This is 
used by additional mechanisms which prevent the set of assumptions from 
being be I ieved. 

Jon Doyle has completed a master's thesis on the implementation 
of a general purpose truth maintenance system (TMS) [Doyle 1978a] . His 
TMS employs the notions of "in" and "out" to represent the truth values 
of assertions. If an assertion is believed by the system then its TMS 
node is "in". If the assertion is not believed, i.e. either known to 
be false or simply unknown, then its TMS node is "out". To make a 
distinction between simply not knowing something's truth value and 
knowing that it is false, two TMS nodes are required, one for the 
/""^ assertion and one for its negation. If the assertion has an unknown 

truth value, then both nodes are "out". If the truth value is known 
then one of the nodes is "in" and the other is "out". An important 
point is that in Doyles system the notion of a contradiction is 
completely seperate from the justifications. A node must be created 
which is declared to be a contradiction and then a justification of 
this contradiction node is installed for each set of nodes which are 
mutauliy contradictory. Specifically a contrdiction node must be 
implied by each pair of nodes representing an assertion and its 
negation. If this is not done then the system will have no problem 
with keeping both of these nodes in, in other words believing both an 
assertion and its negation. 

In Doyle's system a mechanism of major importance in backtracking 
is conditional proof. A conditional proof can be thought of as a TMS 
node which is true whenever a certain implication among other TMS nodes 
is true. Therefore a conditional proof is defined in terms of the 
implication it represents, in other words as a set of antecedents and a 
consequent. To take an example suppose that the implication AaBaC -* D 
is present in some TMS. A conditional proof node of D with respect to 
A and B would represent the truth of the implication AaB -♦ D. Now i f C 
# were known to be true then the implication represented by the 

conditional proof would be true and therefore also the "CP" node. This 
can be stated more formally as C -► (AaB -> D) . 

Doyle's TMS uses unidirectional justifications to keep track of 

consequences and antecedents of beliefs. To achieve dependency 

directed backtracking in such systems it is necessary to trace the 

s~^. antecedents of a failure (or contradiction) and then to blame the 
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contradiction on some set of assumptions. Once this is done it is also 
necessary to add implications for the negations of each assumption to 
prevent the set of assumptions from being again believed at some later 
time. 

Doyle* s TMS also uses a non-monotonic dependency structure. This 
means that truth of a node can depend on another node being unknown. 
In such cases whenever the unknown, i.e. "out", node becomes known, 
i.e." in", the dependant node becomes "out". Uhenever an assumption is 
made, an node representing its negation is created. The assumption is 
then made to depend on its negation being unknown. This can be 
understood as expressing the notion "I will believe it to be true as 
long as I cannot prove -that it is false". When a contradiction is 
found which depends on some set of assumptions a conditional proof is 
constructed for each assumption representing the implication of the 
contradiction by the assumption. This conditional proof is then used 
to imply the negation of each assumption when that assumption would 
lead to the contradiction. Since an assumption depends on its negation 
being "out", when the negation becomes "in" the assumpt i on becomes 
"out". 

The implementation of the conditional proof mechanism is however 
not complete. If the antecedants of the implication a conditional 
proof represents are not "in", then it is extremely difficult and 
computational expensive to check the actual truth value of the 
f^- conditional proof, Doyle's TMS "CP" nodes are "in" in only a subset of 

the cases in which they could actually be shown true. For example the 
conditional proofs which result from a contradiction are each 
associated with the set of assumptions upon which that contradiction 
was blamed. The negation of one of these assumptions is only justified 
when all the other assumptions in that specific set are believed. 
Therefore the conditional proof will not justify the negation of an 
assumption when the assumption can combine with other information to 
give the contradiction. New assumptions which lead to old 
contradictions are also not prevented from being believed. By using 
the contradiction itself as an active deductive agent, my TMS can make 
such deductions and avoid backtracking entirely in many such 
s i tuat i ons. 

In my TMS a contradiction is only a clause which cannot be 
satisfied. Therefore, if a truth value of one of the nodes in the 
clause is removed, the clause will be used to deduce the opposite truth 
value for this node. This allows the direct deduction of false values 
for assumptions which would lead to contradictions. The main advantage 
of this system is the tremendous conceptual and programming simplicity 
achieved. However it is more than just a simplified implementation of 
the previous systems. Because no specific set of assumptions is chosen 
upon which to blame a contradiction, new assumptions which would lead 
to the contradiction can also be proven false. However the difference 
this makes in the number of contradictions encountered is small 
compared to the savings given by any form of dependency directed 
backtracking. 
f~^, I have not ^implemented any conditional proof mechanism for the 
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simple reason that I did not have any application to justify its 
existence. Doyle's TMS uses conditional proof to implement a mechanism 
for levels of abstraction. This is useful in condensing explanations 
of beliefs. The exploration of such uses of conditional proof and its 
relation to the algorithms presented here would be an interesting topic 
for further research. Also there are probably uses for the non- 
monotonic dependency structure present in Doyle's TtlS other than the 
identification of assumptions. The incorporation of such mechanisms 
into this algorithm and the investigation of more sophisticated 
applications would also be worthwhile. 
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Appendix I -- A User's Guide 

This is a summary of the top level procedures which can be used 
to interface the. 'TtIS with any deductive system. The procedures 
descibed here can be loaded into lisp on MIT-AI by evaluating (FASLOAD 
TfIS FASL DSK DAM). 

(TflS-INIT) 

This procedure initializes the TfIS data structures. 

(MAKE-DEPENDENCY-NODE <assertion> <when-true> <when-false> <when-unknown>) 
This procedure creates and returns a new TfIS node to represent 
the assertion which is passed as an argument. The node returned is an 
atom which has the' assert i on placed on its 'ASSERTION property. <when- 
true> is a function to be applied to the assertion when the node 
becomes true. <when-false> and <when-unknown> are similarly functions 
to be used when the node becomes false and unknown respectively. Any 
of the three functi on .arguments can also be nil in which case no. action 
is taken upon the correspoding transition of truth state. 

The. truth state of the node is available as its 'TRUTH property 
which is either 'TRUE, 'FALSE, or 'UNKNOUN. The node is initially 
assumed unknown and must be forced true via either SET-TRUTH or the 
addition of a clause which causes its deduction, <when-true> will be 
f^ applied when this happens. The node can never go directly from being 

true to being false, or vice-versa, it must first pass through a state 
of being unknown and therefore an application of <when-unknown>. 

(SET-TRUTH <node> <value> <reason>) 

This procedure adds truth values. The first argument must be a 
TtIS node and the value must be either 'true or 'false. An error 
results if the node does not have an initial truth state of unknown. 
<reason> should be a representation of the reason for believing the 
truth value and, except for the special atom 'DEFAULT described below, 
is not used by the TfIS other than placing it on the 'EXPLANATION 
property of the node for the convienience of the TMS user. All truth 
values which are given via an external call to this procedure are 
considered premises by the TfIS and their 'SUPPORT property is the atom 
'PREMISE. 

An internal form of this procedure is used to add truth values 
deduced from clauses. In this case the support is a clause. All truth 
values that can be deduced in one step clause deductions from any added 
truth values are also added. If a contradiction results from the 
addition of a truth value, a new clause is generated and added as 
described in the section on contradictions 
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(ADD-CLAUSE <ciause> <reason>) 

This procedure adds a clause to the TMS data base. The ciause 
argument must be a list of dotted pairs. Each pair is a TMS node 
dotted with either 'true or 'false to represent the node or its 
negation respectively. For example: 

(SETQ A (MAKE-DEPENDENCY-NODE f HUMAN-TURING nil nil nil)} 
(SETQ B (MAKE-DEPENDENCY-NODE ' FALL ABLE-TURING nil nil nil)) 
(ADD-CLAUSE (list (cons A 'false ) (cons B f true)) 'HUMAN-FALLABILLITY) 

Uould acid the clause: 

(-CLAUSE-N or -HUMAN-TURING or FALLIBLE-TURING) 

Uhich can be more intuitively understood as (HUMAN=FALLABILLI TY -> 
(HUMAN-TURING -> FALLABLE-TURING) ) . Clause-n represents the TMS node 
generated to represent the truth value of the clause and is given a 
true valus as a premise with an explanation property of <reason> as in 
SET-TRUTH. The ciause node is useful I both in generating explanations 
and in remoying clauses when desired (making the clause node false 
effectively removes the clause). The clause node is returned as the 
value of ADD=CLAUSE. 

f~\ DEFAULTS 

The use of the atom 'DEFAULT as the reason argument in either 
SET-TRUTH or ADD-CLAUSE has a special meaning. It is the way in which 
assumptions are announced to the TMS. A node or clause given a reason 
of 'DEFAULT is said to have a default truth value. Such nodes and 
clauses act just like any other untill contradictions appear. If any 
contradiction can ever be traced to a node with a default value, then 
the value for that node will be automatically retracted by the TMS. 
Similarly if a contradiction can be traced to a deduction from a clause 
with a default value, then the clause will be invalidated and the 
deduction retracted. This is the way in which this TMS handles the 
noh-monotonic functions performed in Doyle's TMS [Doyle 1978a] . 

Notice how default clauses can be used to structure assumptions. 
Suppose for example that you want to assume that grocery stores have 
peas. This assumption can be captured in a clause which represents the 
implication grogery-store -> has-peas. The clause would be given a 
default support to announce that it is an assumption. This is 
described in more' detail in the section on default truth values and 
hierarchies of assumptions. 

If it is desired not to have the TMS do automatic backtracking 
then the assumptions simply need not be announced to the TMS. 
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(REMOVE-TRUTH <node>) 

This procedure removes the truth value of the node which Is 
passed as an argument. An error results of the node already has an 
unknown truth state. All truth values which critically depend on the 
removed value are ( also automatically removed. At the end of the 
removal process nodes whoes truth values were removed, but which have 
default values, have there default values added via SET-TRUTH. It is 
important to realize that truth values which can be duduced from other 
knowledge in the TMS will not be removed. Such truth values can only 
be removed by removing the premises or clauses from which it can be 
deduced. Clauses are removed by removing the truth value of their TMS 
nodes. 

(WHY <object>) 

<object> may be either a node or a clause (more specifically a 
* contradiction, which is a clause which cannot be satisfied). I will 

first consider the case where <object> is a node. In this case the 
procedure returns the justification for the belief in the truth value 
of the node. If the node has truth state of unknown then nil is 
returned. If the value of the node is a premise, then the atom 
'PREMISE is returned. Otherwise it returns a list of the nodes whoes 
truth values were used to deduce the truth vaue of <node>. The clause 
node of the supporting clause will appear first on the list. Because 
^ of the internally generated' clauses which result from the 

contradictions it is possible that other nodes on this list are clause 
nodes. Clause nodes can be identified in that there 'ASSERTION 
property is the atom 'CLAUSE. 

If <object> is a clause then IJhy returns a list of the nodes 
contained in it. The clause node comes first. It is important to note 
the distinction between a clause and a clause node. The former 
represents the actual clauses used by the TMS and it is these which 
appear on the list of contradictions described below. Clause nodes on 
the other hand represent the vallidity of a clause and are used for the 
recording the reasons for belief in clauses and for removing clauses as 
described above. 

UHY can be used to do dependency directed backtracking outside of 
the TMS in cases where more controle over the choice of assumption 
removal is desired. 

All contradictions that occur in the TMS are placed on a list which is the 
value of the global atom CONTRA-LIST. If there are no contradictions then 
the CONTRA-LIST will have value nil. A contradiction is simply a clause 
which cannot be satisfied. 
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Appendix II -- The Data Structures 

Nodes 

Nodes represent assertions or any logical items that take on 
truth values. Nodes are represented by atoms with the following 
properties: 

TRUTH 

This properties can have three values, * true, ' fal se, and 
'unknown, which represent the truth state of the node. 

SUPPORT 

This property gives the support for a truth value of the 
node. It is either the atom 'premise or a clause if the node has a 
truth value, and is nil if the node has a truth property of 
* unknown. 

POS-CLAUSES 

This is the list of clauses which contain the node. 

NEG-CLAUSES 

This is a list of clauses which contain the negation of the 
node. 

MAKE-TRUE 

MAKE-FALSE 

MAKE-UNK 

These are optional properties which give functions to be 

applied to the ASSERTION property when the node undergoes the 

appropriate transition of truth state. 

DEFAULT 

This applies only to nodes that have default truth values and 
is either 'TRUE or 'FALSE. 

ASSERTION 

This is the assertion external to the TMS that the node is 
representing. 

EXPLANATION 

This is the reason for believing a node which is a premise, 
e.g. a node which was set true or false for reasons external to the 
TMS. 

True and Fal se ; 

'True and 'false are atoms with the following properties. 

TRUE ' i 

OPPOSITE => 'FALSE 
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CLAUSES => 'POS-CLAUSES 
OP-CLAUSES -> 'NEG-CLAUSES 
EFFECT => 'MAKE-TRUE 

FALSE i 

OPPOSITE- => 'TRUE 
CLAUSES => 'NEG-CLAUSES 
OP-CLAUSES => 'POS-CLAUSES 
EFFECT => 'MAKE-FALSE 



C I auses 



Clauses are atoms with the following properties 



CLAUSE-LIST 

This is. the list structure which contains the nodes and 
associated truth values which make up the clause. It is a list of 
dotted pairs each of which is a node dotted with the truth value it 
has in the clause. 

PSAT 

This is the number of nodes which either satisfy the clause 

• or couid potentially do so* If this number Is l f and there is a 

f" node with an unknown truth value in the clause, then the clause can 

be used to deduce a truth value for the node. If this number is 8 
then the clause is a contradiction. 

Global Variables 

CONTRA-LIST 

This is a list of all the clauses which are contradictions. 

The following variables are global to certain procedures in the TMS. 

CONTRA-CLAUSE 

This is used to construct the new clause resulting from the 
appearance of contradictions. It is global to the internal version 
of SET-TRUTH. 

CONTRA-SOURCE 

This is the contradiction which initialized the construction 
of a new clause. It is used by the internal version of SET-TRUTH 
to terminate the construction of the new clause. 

REMOVED-LIST 

This is used by REMOVE-TRUTH to keep track of nodes whose 
truth values have been removed. 
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ASSUI1-LIST 

This is used in FIND-ASSUti for accumulating an aiist of the 
assumptions underlying a contradiction associated with their 
maximum distance from the contradiction. The distance to the 
contradiction is the number of clauses in the link between the 
contradiction and the assumption. * 
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Appendix III — The Code 
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081 
082 
083 
004 

005 

006 
007 

008 
009 

010 

011 
012 
013 
014 
015 
016 
017 
018 
019 
02O 
©21 
022 
023 
024 
025 
026 
027 
028 
029 
030 
031 
032 



j INITIALIZATION ROUTINES 

(DECLARE (SPECIAL CONTRA-LIST NODE-COUNT CTRACE VPRINT ACCUfl 

CONTRA-SOURCE CONTRA-CLAUSE REMOVED-LIST ASSUrt-LIST)) 
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(DEFUN TMS-INIT () 
(PROG () 

(PUTPROP 'TRUE ■ 

(PUTPROP 'TRUE ' 

(PUTPROP 'TRUE ' 

(PUTPROP 'TRUE ' 

(PUTPROP 'FALSE 



FALSE 'OPPOSITE) 
POS-CLAbSES 'CLAUSES) 
NEG-CLAUSES 'OP-CLAUSES) 
MAKE-TRUE 'EFFECT) 
'TRUE 'OPPOSITE) 



(PUTPROP 'FALSE 'NEG-CLAUSES 'CLAUSES) 
(PUTPROP 'FALSE 'POS-CLAUSES 'OP-CLAUSES) 
(PUTPROP 'FALSE 'MAKE-FALSE 'EFFECT) 
(SETQ CONTRA-LIST NIL) 
(SETQ CTRACE NIL) 
(SETQ VPRINT NIL))) 



(DEFUN MAKE-DEPENDENCY-NODE (ASSERTION WHEN-TRUE UHEN-FALSE WHEN-UNKNOWN) 
(PROG (NODE) 

(GENSYM 'N) 

(SETQ NODE (GENSYM)) 

(INTERN NODE) 

(PUTPROP NODE 'UNKNOWN 'TRUTH) 

(PUTPROP NODE NIL 'SUPPORT) 

(PUTPROP NODE ASSERTION 'ASSERTION) 

(PUTPROP NODE WHEN-TRUE 'MAKE-TRUE) 

(PUTPROP NODE UHEN-FALSE 'MAKE-FALSE) 

(PUTPROP NODE WHEN-UNKNOWN 'MAKE-UNK) 

(RETURN NODE))) 
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002 jCLRUSE RDDITION ROUTINES RPPNDX 3 Paqe^2 

803 

004, (DEFUN RDD-CLRUSE (CLRUSE-LIST PERSON) 
A 005 (RDD-2 CLRUSE-LIST RERSON) 

006 (BACKTRRCK)) 

007 

088 (DEFUN RDD-2 (CLRUSE-LIST RERSON) 

009 (PROG (CLRUSE CLRUSE-NODE COUNT) 

010 (SETQ COUNT 0) 
Oil 

012 (SETQ CLRUSE-NODE (fIRKE-DEPENDENCY-NOOE 'CLAUSE NIL NIL NIL)) 

13 (PUTPROP CLRUSE-NODE 'TRUE 'TRUTH) 

i 4 (PUTPROP CLRUSE-NODE 'PREMISE 'SUPPORT) 

15 (PUTPROP CLRUSE-NODE RERSON 'EXPLRNRTION) 

16 (CONO (<EQ* RERSON >D£FRULT) 

817 (PUTPROP CLRUSE-NODE 'TRUE 'DEFAULT))) 

818 

019 (GENSYfl 'O 

020 (SETQ CLRUSE (GENSYh)) 

021 (INTERN CLRUSE) 

022 (COND (CTRRCE 

°23 (PRINT '|NEW-CLRUSE |) 

024 (PRINC CLRUSE) 

025 (PRINC '| |) 

026 (PRINC RERSON) 

®27 (PRINT (NRPCRR (FUNCTION (LRMBDA (F) 
■H* <CONS (GET (CRR F) ASSERTION) (COR F)))) 

02 ? CLRUSE-LIST)))) 

830 

031 <SETQ CLRUSE-LIST (CONS (CONS CLRUSE-NODE 'FALSE) CLRUSE-LIST)) 

®32 (PUTPROP CLAUSE CLRUSE-LIST 'CLRUSE-LIST) 

833 (MRPC (FUNCTION (LflUBOR (NODE) 

034 (COND ((NOT (EG (GET (COR NODE) 'OPPOSITE) 

HI < . (GET (CRR NODE) 'TRUTH))) 

036 (SETQ COUNT (U COUNT)))))) 

37 CLRUSE-LIST) 

38 (PUTPROP CLRUSE COUNT 'PSRT) 
/*"N 39 

040 (MRPC (FUNCTION (LRMBDR (NODE) 

04 1 (PUTPROP (CRR NODE) 

042 ,,, (CONS CLRUSE 

043 (GET (CAR NODE) (GET (CDR NODE) 'CLAUSES))) 

044 (GET (CDR NODE) 'CLAUSES)))) 

04 5 CLRUSE-LIST) 
046 

047 (COND ((= COUNT 0) 

048 (SETQ CONTRR-LIST (CONS CLRUSE CONTRR-LIST))) ) 

04 9 (PROG (CONTRR-SOURCE CONTRR-CLRUSE) 

50 (DEDUCE-CHECK CLRUSE)) 

051 (RETURN CLRUSE-NODE))) 
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002 ; TRUTH VALUE ADDITION ROUTINES ™*MJ-1*S*J. 
003 

• 0O4 (DEFUN SET-TRUTH (NODE VRLUE EXPLAN) 

f\ 005 (PROG (CONTRA-SOURCE CONTRA-CLAUSE) 

00 6 (PUTPROP NODE EXPLAN 'EXPLANATION) 

007 <COND ((EQ EXPLRN 'DEFAULT) (PUTPROP NODE VALUE 'DEFAULT))) 
00S (SET-2 NODE VALUE 'PREMISE) 

009 (BACKTRACK))) 

# eio 

Oil (DEFUN SET-2 (NODE VRLUE SUPPORT) 
012 (PROG (TRACE F) 

013 - . <C0ND SPRINT (PRINT '|SET TRUTH]) (PR INC NODE) (PRINC VALUE) (PRINC SUPPORT))) 

014 

*5 ; TRACE IS TRUE IF A CONTRADICTION HAS RESULTED FROM THIS SET, EITHER DIRECTLY 

016 ; OR AS A CONSEQUENCE OF RESULTING RECURSIVE DEDUCTIONS 

017 

01S (SETQ TRACE NIL) 

019 (COND ((NOT (EQ (GET NODE 'TRUTH) 'UNKNOWN)) 

020 (ERROR /SET-TRUTH— VALUE-NOT-UNKNOWN NODE))) 
921 (PUTPROP NODE VALUE * TRUTH) 

022 (PUTPROP NODE SUPPORT 'SUPPORT) 

023 (flAPC (FUNCTION (LAMBDA (CLAUSE) (PROG 

024 (PUTPROP CLRUSE (I- (GET CLAUSE 'PSAT)) »PSAT) 

025 (COND ((= (GET CLAUSE 'PSAT) 8) 

HI (SETQ CONTRA-LIST (CONS CLAUSE CONTRA-LIST)) 

027 (COND (CTRACE 

028 (PRINT 'CONTRADICTION) 

HI (PRINC (GET CLAUSE 'CLAUSE-LIST))))))))) 

30 (GET NODE (GET VALUE 'OP-CLAUSES))) 

31 (COND ((GET NODE (GET VALUE 'EFFECT)) 

032 (APPLY (GET NODE (GET VALUE 'EFFECT)) (LIST (GET NODE 'ASSERTION))))) 

034 (HRPC (FUNCTION (LAMBDA (CLAUSE) 

35 (COND ((AND TRACE 

. 036 (EQ CLAUSE CONTRA-SOURCE)) 

037 (ADD-2 CONTRA-CLAUSE 'CLAUSE-RESOLUTION) 

038 (SETQ CONTRA-SOURCE NIL) 
/-N 039> (SETQ TRACE NIL)) 

1 040 ((AND (= (GET CLAUSE 'PSAT) 0) 

04 1 (NULL CONTRA-SOURCE)) 

042 (SETQ CONTRA-SOURCE CLAUSE) 

043 i (SETQ CONTRA-CLAUSE (MERGE CLAUSE NIL NODE NIL)) 

044 (SETQ TRACE 'TRUE)) 

^ 45 ((SETQ F (DEDUCE-CHECK CLAUSE)) 

046 (SETQ TRACE 'TRUE) 

047 (SETQ CONTRA-CLAUSE 

048 (MERGE CLAUSE CONTRA-CLAUSE NODE (CAR F))))))) 

049 (GET NODE (GET VALUE 'OP-CLAUSES))) 

050 (RETURN TRACE))) 

051 ' 

052 (DEFUN DEDUCE-CHECK (CLAUSE) ;THE FACT DEDUCED IS RETURNED ONLY IF ft CONTRADICTION RESULTED. 

053 (PROG (F) 

54 (COND ((AND (= (GET CLAUSE 'PSAT) 1) 

55 (SETQ F (PCONSEQ CLAUSE)) 

05 6 (SET-2 (CAR F) j£C0R F) CLAUSE)) 

57 (RETURN F>) 

58 (T (RETURN NIL))))) 
059 

060 (DEFUN PCONSEQ (CLAUSE) 

61 (00 CLIST (GET CLAUSE 'CLAUSE-LIST) (COR CLIST) • 

62 (NULL CLIST) 

63 (COND ((EQ (GET (CAAR CLIST) 'TRUTH) 'UNKNOWN) 

64 (RETURN (CAR CLIST)))))) 
065 

066 (DEFUN MERGE (CLAUSE ACCUM EXCEPT! EXCEPT2) 

067 (PROG () 

068 (MAPC (FUNCTION (LAMBDA (NODE) 

069 (COND ((NOT (OR (EQ (CAR NODE) EXCEPTI) 

070 ' (EQ (CAR NODE) EXCEPT2) 

071 (MEMBER NODE ACCUM))) 

072 (SETQ ACCUM (CONS NOOE ACCUM)))))) 
y-S 073 (GET CLAUSE 'CLAUSE-LIST)) 

' ■ 074 (RETURN ACCUM))) 
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002 ; TRUTH VALUE REMOVAL ROUTINES ! RPPNDX 3 PageJ. 

003 

004 (DEFUN REMOVE-TRUTH (NODE) 
f"^ 005 (PROG (REMOVED-LIST) 

006 (REMOVE -2 NODE) 

0O7 

008 (MAPC (FUNCTION (LAMBDA (DOT) 

009 (PROG (NODE) 

010 (SETQ NODE (CRR DOT)) 

j* (COND ((NOT (EQ (GET NODE 'TRUTH) 'UNKNOUN)) (RETURN T))) 

01 3 (NODE-DEDUCE-CHECK NODE 'TRUE) 

814 (NODE-DEDUCE-CHECK NODE 'FALSE)))) 

015 REflOVED-LIST) 
016 

017 (MAPC (FUNCTION (LAMBDA (DOT) 

018 (PROG (NODE) 

019 (SETQ NODE (CRR DOT)) 

020 (COND ((NOT (EQ (GET NODE 'TRUTH) 'UNKNOMN)) (RETURN T))> 

022 (COND ((GET NODE 'DEFAULT) 

023 (PROG (CONTRR-SOURCE CONTRR-CLRUSE) 

024 (PUTPROP NOOE 'DEFAULT 'EXPLANATION) 

®tZ (SET - 2 NODE (GET NODE 'DEFAULT) 'PREMISE))))))) 

026 REMOVED-LIST))) 

027 

028 (DEFUN REMOVE-2 (NODE) 

029 (PROG (VALUE) 

030 (COND (VPRINT (PRINT ' |REMOVE-VRLUE |) 

031 (PRINC NODE))) 

032 (SETQ VALUE (GET NODE 'TRUTH)) 

033 (COND ((EQ VALUE 'UNKNOWN) 

034 (ERROR 'REMOVE-VALUE— VALUE-NOT-PRESENT NOOE))) 

035 (PUTPROP NODE 'UNKNOUN 'TRUTH) 

036 (PUTPROP NODE NIL 'SUPPORT) 

037 (SETQ REMOVED-LIST (CONS (CONS NODE VALUE) REMOVED-LIST)) 

038 (MAPC (FUNCTION (LAMBDA (CLAUSE) (PROG 

^s 039 (PUTPROP CLAUSE (1+ (GET CLAUSE 'PSAT)) »PSAT) 

f 040 (COND ((= (GET CLAUSE 'PSAT) 1) 

ti (SETQ CONTRA-LIST (DELQ CLAUSE CONTRA-L 1ST) )))))) 

0^2 (GET NODE (GET VALUE 'OP-CLAUSES))) 

043 

044 (COND ((GET NODE 'MAKE-UNK) 

* 045 (APPLY (GET NODE 'MAKE-UNK) (LIST (GET NODE 'ASSERTION))))) 

046 

047 (HAPC (FUNCTION (LAMBDA (CLAUSE) (PROG (F) 

048- (COND ((ANO (> (GET CLAUSE 'PSAT) i) 

049 (SETQ F (CAR (CONSEQ CLAUSE))) 

050 (EQ CLAUSE (GET F 'SUPPORT))) 

051 (REMOVE-2 F)))))) ' 

052 (GET NODE (GET VALUE 'OP-CLAUSES))))) 
0S3 

054 (DEFUN CONSEQ (CLAUSE) 

055 (DO CLIST (GET CLAUSE 'CLAUSE-LIST) (COR CLIST) 

056 (NULL CLIST) 

057 (COND ((EQ (GET (CAAR CLIST) 'TRUTH) (CDAR CLIST)) 

058 (RETURN (CAR CLIST)))))) 
059 

060 (DEFUN NODE-DEDUCE-CHECK (NODE VALUE) 

061 (PROG (CONTRA-SOURCE CONTRA-CLAUSE) 

°6? - (DO C-LIST (GET NODE (GET VALUE 'CLAUSES)) (CDR C-LIST) 

0B3 (OR (NULL C-LIST) 

064 (EQ (GET NODE 'TRUTH) VRLUE)) 

065 (DEOUCE-CHECK (CAR C-LIST))))) 
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882 ; EXPLANATION AND BACKTRACKING ROUTINES RPPNOX 3 Page_5 

883 

084 (DEFUN WHY (OBJECT) 
/^ 00 5 (PROG (SUPPORT CLIST WHY-LIST) 

006 <COND ((SETQ CLIST (GET OBJECT 'CLRUSE-LIST)) 

007 (RETURN (MAPCAR (FUNCTION (LAMBDA (F) (CAR F))) CLIST))) 
888 (T 

009 (SETQ SUPPORT (GET OBJECT 'SUPPORT)) 

010 <COND ((EQ SUPPORT 'PREMISE) (RETURN 'PREMISE)) 

** <T (DO CLIST (GET SUPPORT 'CLAUSE-LIST) (COR CLIST) 

012 (NULL CLIST) 

} 3 (CONO ((NOT (EQ (CAAR CLIST) OBJECT)) 

I 1 * (SETQ WHY-LIST (CONS (CAAR CLIST) WHY-LIST))))) 

015 , (RETURN WHY-LIST))))))) 
816 
' 817 (OEFUN BACKTRACK () 

818 (PROG (ASSUMPTION ASSUM-LIST) 

i9 (SETQ ASSUMPTION NIL) 

820 (SETQ ASSUM-LIST NIL) 

21 (COND ((NULL CONTRA-LIST) 

022 (RETURN T))) 
823 

024 (DO CONTRA CONTRA-LIST (CDR CONTRA) 

25 (OR (NOT (NULL ASSUM-LIST)) 

26 (NULL CONTRA)) 
827 

028 (MAPC (FUNCTION (LAMBDA (NODE) (FIND-ASSUM NODE i))) 

029 (WHY (CAR CONTRA)))) 

838 " ■ • 

031 (DO ( (DO-ASSUM ASSUM-LIST (COR DO-ASSUM)) 

32 (HIND 1000 MIND)) 

33 ((NULL DO-ASSUM)) 

034 (COND ((< (CDAR DO-ASSUM) MIND) 

035 (SETQ MIND (COAR DO-ASSUM)) 

036 (SETQ ASSUMPTION (CAAR OO-ASSUM)) ) ) > 
837 

38 (COND ((NULL ASSUMPTION) 
f< 039 (PRINT 'ICONTRADICTION DEPENDS ON NO ASSUMPTIONS!) 

§ ' 040 (RETURN NIL)) 

041 (T (REMOVE -TRUTH ASSUMPTION))) 

842 

843 (BACKTRACK))) 

844 

845 (DEFUN FIND-ASSUM (NODE LEVEL) 

846 (PROG (SUPPORT ASSC) 

047 (SETQ SUPPORT (GET NODE 'SUPPORT)) 

048 (COND ((EQ SUPPORT 'PREMISE) 

049 <COND ((EQ (GET NODE 'EXPLAf^ATION) 'DEFAULT) 

050 (COND ((SETQ ASSC (ASSOC NODE ASSUM-LIST)) 
ll* (RPLACD ASSC (MAX LEVEL (CDR ASSC)))) 

11% < T ( SETQ ASSUM-LIST (CONS (CONS NODE LEVEL) ASSUM-LIST))))))) 

* 3 <T (MAPC (FUNCTION (LAMBDA (NODE) (FIND-ASSUM NODE (1+ LEVEL)))) 
054 (WHY NODE)))))) 

855 

856 (DEFUN SATISFY (NODES) 

57 (MAPC (FUNCTION (LAMBDA (NODE) 

058 (COND ((NOT (EQ (GET NODE 'TRUTH) 'UNKNOWN)) 

059 (PUTPROP NODE 'TRUE 'DEFAULT)) 

060 (T (SET-TRUTH NODE 'TRUE 'DEFAULT))))) 
861 NODES)) 

862 

863 (TMS-INIT) 



^— "S 



jm 



Symbol Table for? DflfljAPPNDX 3 



85/31/78 Page I 



^ KDO-2 EXPR 

/*> ADD-CLAUSE ......... EXPR 

BACKTRACK EXPR 

CONSEQ EXPR 

DEDUCE-CHECK EXPR 

TttS-INIT EXPR 



002 008 FIND-RSSUri EXPR 005 045 

002 004 HAKE-DEPENDENCY-NODE EXPR 001 021 

005 017 HERGE EXPR 003 066 

004 054 NODE-OEDUCE-CHECK .. EXPR 004 060 

003 052 SET-2 ..EXPR 003 011 

001006 WHY .....EXPR 005 004 



PCONSEQ EXPR 883 060 

REriOVE-2 EXPR 004 828 

REMOVE-TRUTH EXPR 084 884 

SATISFY EXPR 805 856 

SET-TRUTH EXPR 883 084 
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